-
[OPIK-1457] Refactor Dockerfiles to enhance security and user permissions (#1844)
frostbyte_neo 发布于
2025-04-22 09:39:08 +00:00 - Refactor Dockerfiles to enhance security and user permissions
This change improves the security posture of the application by ensuring that all containers run as non-root users. Without these changes, the application could be vulnerable to privilege escalation attacks.
- Updated Dockerfiles across multiple services to change ownership of application directories to a non-root user (1001).
- Ensured that the /tmp directory is writable by all users in the opik-backend Dockerfile to prevent permission issues during runtime.
- Added necessary directory ownership
Signed-off-by: Thales Ceolin thales@ulevel.com
- tackling Andres suggested changes
Signed-off-by: Thales Ceolin thales@ulevel.com
下载附件